Merge pull request #15 from wgpsec/copilot/implement-ecs-scene-volcengine

Add Volcano Engine ECS scenario

Author: No-Github

volcengine/ecs/README.md

@@ -0,0 +1,53 @@
+# 场景使用
+
+1. 使用前请按照注意事项里内容进行配置 (若空则无需配置)
+2. 使用时命令如下
+
+拉取
+```
+redc pull volcengine/ecs
+```
+
+开启
+```
+redc run volcengine/ecs
+```
+
+查询
+```
+redc status [uuid]
+```
+
+关闭
+```
+redc stop [uuid]
+```
+
+# 注意事项
+
+## 认证配置
+需要配置火山引擎的访问凭证，有以下两种方式：
+
+1. **环境变量方式**（推荐）
+```bash
+export VOLCENGINE_ACCESS_KEY="your-access-key"
+export VOLCENGINE_SECRET_KEY="your-secret-key"
+```
+
+2. **配置文件方式**
+在 `~/.volcengine/config` 中配置
+
+## 常见问题
+若启动场景报错，可能原因：
+1. 火山引擎账户余额不足
+2. 与火山引擎 API 网络连接超时
+3. 火山引擎该区域售罄或下架 instance_type 的配置机型
+4. 未配置正确的访问凭证（AK/SK）
+
+## 场景配置说明
+- **实例规格**: ecs.e-c1m1.large (2核2G内存)
+- **计费方式**: 按量计费（PostPaid）
+- **系统盘**: 20GB ESSD_PL0
+- **操作系统**: Debian 12
+- **登录方式**: 随机生成的SSH密码
+- **区域**: 北京（cn-beijing）

volcengine/ecs/case.json

@@ -0,0 +1,6 @@
+{
+    "name":"ecs",
+    "user":"copilot",
+    "version": "1.0.0",
+    "description":"火山引擎 ECS 场景，使用按量计费部署 Debian 实例"
+}

volcengine/ecs/deploy.sh

@@ -0,0 +1,45 @@
+init(){
+
+    terraform init
+
+}
+
+start_ecs(){
+
+    terraform apply -auto-approve
+
+}
+
+stop_ecs(){
+
+    terraform destroy -auto-approve
+
+}
+
+status_ecs(){
+
+    terraform output
+
+}
+
+case "$1" in
+    -init)
+        init
+        ;;
+    -start)
+        start_ecs
+        ;;
+    -stop)
+        stop_ecs
+        ;;
+    -status)
+        status_ecs
+        ;;
+    -h)
+        echo -e "\033[1;34m使用 -init 初始化\033[0m"
+        echo -e "\033[1;34m使用 -start 启动\033[0m"
+        echo -e "\033[1;34m使用 -stop 关闭\033[0m"
+        echo -e "\033[1;34m使用 -status 查询状态\033[0m"
+        exit 1
+        ;;
+esac

volcengine/ecs/main.tf

@@ -0,0 +1,98 @@
+provider "random" {}
+
+resource "random_password" "password" {
+  length = 10
+  special = true
+  override_special = "_%@"
+  min_upper   = 1
+  min_lower   = 1
+  min_numeric = 1
+  min_special = 1
+}
+
+resource "volcengine_ecs_instance" "instance" {
+  instance_name        = "volcengine_bj_ecs"
+  instance_type        = "ecs.e-c1m1.large"
+  image_id             = data.volcengine_images.debian.images[0].image_id
+  subnet_id            = volcengine_subnet.subnet.id
+  security_group_ids   = [volcengine_security_group.group.id]
+  system_volume_type   = "ESSD_PL0"
+  system_volume_size   = 20
+  instance_charge_type = "PostPaid"
+  password             = random_password.password.result
+  
+  user_data = base64encode(<<EOF
+#!/bin/bash
+sudo apt-get update
+sudo apt-get install -y ca-certificates
+sudo apt-get install -y curl
+sudo apt-get -y install wget
+sudo apt-get install -y lrzsz
+sudo apt-get install -y tmux
+sudo apt-get install -y unzip
+sudo echo "set-option -g history-limit 20000" >> ~/.tmux.conf
+sudo echo "set -g mouse on" >> ~/.tmux.conf
+
+sudo echo "net.core.default_qdisc=fq" >> /etc/sysctl.conf
+sudo echo "net.ipv4.tcp_congestion_control=bbr" >> /etc/sysctl.conf
+sudo sysctl -p
+
+sudo apt-get install -y python3-pip
+sudo pip3 install trzsz --break-system-packages
+
+EOF
+  )
+}
+
+resource "volcengine_eip_address" "eip" {
+  billing_type = "PostPaidByTraffic"
+  bandwidth    = 100
+  isp          = "BGP"
+  name         = "volcengine_bj_eip"
+  description  = "EIP for ECS instance"
+}
+
+resource "volcengine_eip_associate" "eip_attach" {
+  allocation_id = volcengine_eip_address.eip.id
+  instance_id   = volcengine_ecs_instance.instance.id
+  instance_type = "EcsInstance"
+}
+
+resource "volcengine_security_group" "group" {
+  security_group_name = "volcengine_security_group"
+  vpc_id              = volcengine_vpc.vpc.id
+}
+
+resource "volcengine_security_group_rule" "allow_all_tcp" {
+  direction         = "ingress"
+  security_group_id = volcengine_security_group.group.id
+  protocol          = "tcp"
+  port_start        = 1
+  port_end          = 65535
+  cidr_ip           = "0.0.0.0/0"
+  depends_on = [
+    volcengine_security_group.group
+  ]
+}
+
+resource "volcengine_vpc" "vpc" {
+  vpc_name   = "volcengine_vpc"
+  cidr_block = "172.16.0.0/16"
+}
+
+resource "volcengine_subnet" "subnet" {
+  subnet_name = "volcengine_subnet"
+  cidr_block  = "172.16.0.0/24"
+  zone_id     = data.volcengine_zones.default.zones[0].id
+  vpc_id      = volcengine_vpc.vpc.id
+}
+
+data "volcengine_zones" "default" {
+}
+
+data "volcengine_images" "debian" {
+  os_type          = "Linux"
+  visibility       = "public"
+  instance_type_id = "ecs.e-c1m1.large"
+  name_regex       = "Debian 12"
+}

volcengine/ecs/outputs.tf

@@ -0,0 +1,9 @@
+output "ecs_ip" {
+  value       = volcengine_eip_address.eip.eip_address
+  description = "ECS public IP address"
+}
+
+output "ecs_password" {
+  value       = nonsensitive(random_password.password.result)
+  description = "ECS SSH password"
+}

volcengine/ecs/versions.tf

@@ -0,0 +1,18 @@
+terraform {
+  required_providers {
+    volcengine = {
+      source  = "volcengine/volcengine"
+      version = "0.0.159"
+    }
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.0"
+    }
+  }
+}
+
+provider "volcengine" {
+  region = "cn-beijing"
+  # access_key and secret_key can be provided via environment variables:
+  # VOLCENGINE_ACCESS_KEY and VOLCENGINE_SECRET_KEY
+}